← All roles

Security Engineer - GRC Sales

xAI· Information Security
Apply on company site
Full-timePosted 5d ago

About the role

Mid-to-senior Governance, Risk, and Compliance (GRC) professional focused on third-party risk management and customer trust, serving as a security-minded presales engineer for SpaceXSI and supporting third-party risk/vender management processes.

Responsibilities

  • Support the sales organization as a cybersecurity/GRC presales partner: attend customer and prospect meetings, present our security and compliance posture, and answer technical and control-related questions with accuracy and judgment.
  • Own and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests; maintain a reusable knowledge base of control narratives grounded in how SpaceXSI actually operates.
  • Build and maintain working fluency across the SpaceXSI environment — AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and governance of IT and AI environments — sufficient to answer customer questions and escalate appropriately to engineering when needed.
  • Partner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current as architecture, controls, and certifications evolve.
  • Translate customer security requirements into actionable internal asks; help distinguish must-have contractual or control commitments from unreasonable or out-of-scope demands.
  • Contribute to policies, standards, and procedures related to third-party risk, customer assurance, and vendor security due diligence.
  • Coordinate with the broader GRC and security teams on overlapping frameworks and evidence (e.g., SOC 2, ISO 27001, ISO 42001, privacy commitments) so external answers remain consistent with our internal control environment and GRC tooling (e.g., Vanta).
  • Identify patterns in customer questionnaires and deal blockers; feed those insights back into product, engineering, and GRC roadmaps to reduce friction over time.
  • Create and present concise status updates on questionnaire volume, deal-impacting security asks, vendor risk posture, and emerging customer assurance themes to sales leadership and GRC stakeholders.
  • Champion clear, honest customer communication — building trust by explaining what we do, how we govern AI and infrastructure, and where we are intentionally scoping risk.

Qualifications

  • Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field.
  • 5+ years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related role with customer-facing or sales-adjacent responsibilities.
  • Demonstrated experience completing or owning customer vendor security questionnaires and participating in security due-diligence discussions with enterprise buyers.
  • Working technical fluency across several of the following: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments (AWS, GCP, or Azure).
  • Solid understanding of common security and compliance frameworks used in customer assurance (e.g., SOC 2, ISO 27001, NIST CSF) and how controls map to questionnaire language.
  • Strong written and verbal communication skills, with the ability to explain cybersecurity and GRC concepts to sales, customers, legal, and engineering audiences.

Skills

Required:Vendor security questionnaires

Benefits

  • equity
  • comprehensive medical, vision, and dental coverage
  • 401(k) retirement plan
  • short & long-term disability insurance
  • life insurance
  • various other discounts and perks
Last updated Oct 21, 2026. Interested? Apply on the company site.

About xAI

liquid-ai-recruiting-target
Company profileWebsite

More open roles at xAI